So, recently Facebook officially announced that It has found a security bug in its code, which affected almost 50 million accounts. Now yeah the number is pretty big, but what’s worse is the bug itself. Link to official announcement from Facebook about this Bug : https://newsroom.fb.com/news/2018/09/security-update/ So, let me get it straight. This security bug allows anyone to login to anyone else’s Facebook account. Which means I can simply login to Mark Zuckerburg’s Facebook account without having to do anything complex. So what is this bug? How dangerous and how dumb is it? Well, if you guys don’t know about the “View As” tool on Facebook, its basically a tool using which you can see how your profile looks from some other person’s Facebook account, so that you can customise your profile accordingly and you get to know how your profile looks from your friend’s Facebook account. Now, this feature is designed only as a view-as interface, which means it is designed only to let people know how their profile looks like from another person’s account. It does not allow anything else than just viewing the profile. This feature is existing from long back on Facebook. And honestly I never used it anytime, because, I don’t know, I never found it useful, anyways. So what happened is, when you go and use the View As tool, and select a specific person to view your profile. It displays a composer box where you can post something on Facebook. Now in this composer box, there exists a component using which you can post birthday wishes to someone. This component of the composer incorrectly gave the user an option to post a video. So, what’s the big deal if you are given an option to post a video? Obviously, this is not going to affect anyone, because if you do post a video, it is still posted on your timeline only. Well, here is the catch. Facebook released a new version of its video uploader, and this video uploader when used with the view-as option, incorrectly and un-intentionally generated the access token of the Facebook Mobile App. But wait, it is not generating your access token here, it is actually generating the access token of the person who you are using to see your profile with the view-as option. Which means, if I am using the view as option to see how my profile looks from Mark Zuckerburg’s Facebook account, then I am actually getting the access token of the Zuckerburg’s Facebook account! And I can simply find this access token in the html of the page, because it is generated there by the video uploader. And if you don’t know what is meant by an access token, it is simply a string value using which you can login to your Facebook account without having to enter your username and password. So, basically using an ac ... https://www.youtube.com/watch?v=R4XfHCw3eo0

Sign up here for 10,000 free minutes: https://bit.ly/3RDX0I9 Find out more about ZEGOCLOUD: https://bit.ly/3RGDA5C Do you really trust everyone you give your WiFi password to? Because, once someone joins your WiFi, they can easily spy on you with very less effort. DNS stands Domain Name Service. The job of DNS is to resolve a domain name (like twitter.com) into its corresponding IP address (like 104.244.42.1). When you are trying to visit a website, you are initially sending a DNS query to a DNS server. This DNS server is configured at your WiFi router. Therefore, if hackers manage to take control of your router, they can change the DNS settings and configure their own DNS server here. By doing so, they can see all the DNS queries made from your network, hence see all the websites that you are visiting. In this video, I show a demonstration on how threat actors are able to do this. I do this on my own home WiFi network which I own. If you want to try it out too, make sure to perform this experiment only on your own WiFi and not on someone else's without their consent. Thanks for watching! SUBSCRIBE for more videos! Join my Discord: https://discord.gg/6TjBzgt Follow me on Instagram: https://instagram.com/teja.techraj Website: https://techraj156.com​​​​​ Blog: https://blog.techraj156.com ... https://www.youtube.com/watch?v=wf-b74ciHLc